Network Traffic Manager CPU Protection During DDoS Attacks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods are inadequate in protecting CPUs from the impact of distributed denial of service (DDoS) attacks, which overwhelm servers with malicious traffic, leading to reduced availability and performance.
Innovation Solution
A network traffic management system that monitors client devices, classifies them as valid or potential attackers, and performs network actions to mitigate CPU utilization when thresholds are exceeded, thereby isolating malicious devices and maintaining system performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the network traffic manager processes all incoming traffic during a DDoS attack, then it can maintain service for legitimate clients, but the CPU utilization exceeds threshold values causing system overload and performance degradation
Solution Approach 1:
The patent segments incoming network traffic into two distinct categories: legitimate traffic and malicious traffic. This is achieved through classification mechanisms that analyze traffic patterns, source addresses, and behavioral characteristics to differentiate between valid client devices and potential attackers. By segmenting the traffic flow, the system can apply different processing rules to each segment, allowing legitimate traffic to be processed normally while malicious traffic is filtered out, thus maintaining service availability without overwhelming the CPU
Solution Approach 2:
The patent extracts and isolates malicious traffic from the overall traffic stream before it can consume CPU resources. The system identifies and separates packets originating from potential attackers, removing them from the processing queue that would otherwise burden the CPU. This extraction process prevents malicious traffic from contributing to CPU utilization while preserving the integrity and performance of legitimate traffic handling
2Reliability
If the system implements comprehensive traffic monitoring and classification, then it can identify and isolate malicious devices, but the complexity of the network traffic manager increases
Solution Approach 1:
The patent implements preliminary action by pre-configuring classification rules, threshold values, and response protocols before attacks occur. The system establishes baseline traffic patterns and defines classification criteria in advance, allowing it to quickly categorize incoming traffic during attacks without requiring complex real-time analysis. This pre-prepared framework reduces the computational burden during incidents while maintaining high detection accuracy
Solution Approach 2:
The patent incorporates feedback mechanisms where the system continuously monitors traffic patterns, compares them against established thresholds, and adjusts classification decisions based on observed behavior. The feedback loop allows the system to learn from ongoing traffic analysis, refining its ability to distinguish legitimate from malicious traffic while maintaining manageable complexity through adaptive rather than purely static rules
Data Source
AI summary
Methods, non-transitory computer readable media, and network traffic manager apparatus that assists with protecting a CPU during a DDOS attack includes monitoring network traffic data from plurality of client devices. Each of the plurality of client devices are classified as a valid device or a potential attacker device based on the monitoring. Next a determination of when CPU utilization of a network traffic manager apparatus is greater than a stored threshold value is made. The CPU utilization of the network traffic manager increases as a number of the plurality of client devices classified as the potential attacker device increases. One or more network actions are performed on the plurality of client devices classified as the potential attacker device to protect the CPU when the determination indicates the CPU utilization is greater than the stored threshold value.